xinkaa-adv.txt

Luigi Auriemma Application: Xinkaa WEB Station http://www.xinkaa.com Versions: = 1.0.3 Platforms: Windows Bug: directory traversal Exploitation: remote Date: 18 Feb 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2 Bug 3 The Code 4 Fix...

xinkaa Web station 1.0.3 - Directory Traversal

xinkaa Web station 1.0.3 - Directory Traversal source: https://www.securityfocus.com/bid/12606/info A vulnerability has been identified in the handling of certain types of requests by Xinkaa WEB Station. Because of this, it is possible for an attacker to gain access to potentially sensitive syste...

xinkaa Web station 1.0.3 - Directory Traversal

source: https://www.securityfocus.com/bid/12606/info A vulnerability has been identified in the handling of certain types of requests by Xinkaa WEB Station. Because of this, it is possible for an attacker to gain access to potentially sensitive system files. Read privileges granted to these files...

CVE-2004-1480

Unknown vulnerability in the management station in HP StorageWorks Command View XP 1.8B and earlier allows remote attackers to bypass access restrictions...

CVE-2004-1480: Undefined Security Weakness

Unknown vulnerability in the management station in HP StorageWorks Command View XP 1.8B and earlier allows remote attackers to bypass access restrictions...

Sun Enterprise Storage Manager may allow an unprivileged local user to gain root access

Overview A vulnerability exists in Sun StorEdge Enterprise Storage Manager ESM that may allow unauthorized local users to gain root privileges. Description The Sun StorEdge Enterprise Storage Manager ESM version 2.1 for the Sun SPARC platform may allow non-root local users assigned the "EMSUser"...

CVE-2003-0905: Undefined Security Weakness

Unknown vulnerability in Windows Media Station Service and Windows Media Monitor Service components of Windows Media Services 4.1 allows remote attackers to cause a denial of service disallowing new connections via a certain sequence of TCP/IP packets...

SnapStream PVS LITE Cross Site Scripting Vulnerabillity

Application: SnapStream PVS Vendor : http://www.snapstream.com Versions: LITE Platforms: Windows/Unix Bug: Cross Site Scripting Vulnerabillity Risk: Low Exploitation: Remote with browser Date: 6 Jan 2004 Author: Rafel Ivgi, The-Insider e-mail: [email protected] web: http://theinsider.deep-ice.c...

Apple AirPort Base Station Authentication Credential Encryption Weakness

The remote host is an Apple Airport Wireless Access Point which can be administrated on top of TCP port 5009. There is a design flaw in the administrative protocol which makes the clients which connect to this port send the password in cleartext although slightly obsfuscated. An attacker who has...

CVE-2000-0027

IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack...

CVE-2000-0027

IBM Network Station Manager NetStation is affected by CVE-2000-0027: local users can gain privileges via a symlink attack. The flaw involves improper handling of symbolic links that enables privilege escalation on affected systems. The provided documents describe the vulnerability but do not spec...

CVE-2001-0541: Undefined Security Weakness

Buffer overflow in Microsoft Windows Media Player 7.1 and earlier allows remote attackers to execute arbitrary commands via a malformed Windows Media Station .NSC file...

CVE-2000-0027: Undefined Security Weakness

IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack...

SnapStream Personal Video Station 1.2 a - PVS Directory Traversal

SnapStream Personal Video Station 1.2 a - PVS Directory Traversal source: https://www.securityfocus.com/bid/3100/info Snapstream Personal Video Station is an application for Microsoft Windows which allows users to record video output on their PC and view it at a later time, locally or via an HTTP...

SnapStream Personal Video Station 1.2 a - PVS Directory Traversal

source: https://www.securityfocus.com/bid/3100/info Snapstream Personal Video Station is an application for Microsoft Windows which allows users to record video output on their PC and view it at a later time, locally or via an HTTP interface. The Snapstream PVS web interface runs on port 8129...

CVE-2000-0989

Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of service and possibly execute commands via a long username...

CVE-2000-0989

Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of service and possibly execute commands via a long username...

CVE-2000-0989: Undefined Security Weakness

Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of service and possibly execute commands via a long username...

Дырка в Intel InBusiness eMail Station

Классическое переполнение буфера при длинном имени пользователя в протоколе POP3...

DoS in Intel corporation 'InBusiness eMail Station'

Intel corporation 'InBusiness eMail Station' firmware version 1.04.87 latest Denial of service vulnerability. Vendor notification date: 20/10-2000 Public notification date: 20/10-2000 Problem: I found a buffer overflow in the Intel InBusiness eMail Station, which can enable an attacker to execute...